Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7a039c7b-9805-360c-bf59-e0f031a3f72a.roa
File: 7a039c7b-9805-360c-bf59-e0f031a3f72a.roa (raw, json)
Hash identifier: md1l0VR7YmrVk+MMjUOrNhp2DubjkS6LWfFTaYAAdRc=
Subject key identifier: 03:CC:FC:37:CB:60:6C:23:05:10:89:4B:27:C7:A5:75:A0:5D:B7:70
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CEC742B851126E7FE8370EC00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7a039c7b-9805-360c-bf59-e0f031a3f72a.roa
Signing time: Mon 14 Feb 2022 05:00:00 +0000
ROA not before: Mon 14 Feb 2022 05:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ec:74:2b:85:11:26:e7:fe:83:70:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 14 05:00:00 2022 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=f010738d-ae06-4e65-90f0-e89e56eb0f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:fa:cc:a3:9c:1e:df:7c:6f:76:8c:14:ec:
e9:14:70:5d:b0:95:0d:5c:54:3c:5c:07:05:54:74:
35:0a:c2:51:4e:a9:a2:56:19:f5:5a:2c:38:83:f4:
d7:ed:57:b9:7a:f6:7a:5d:09:25:27:35:5c:77:dc:
8c:bd:d9:f1:e0:75:42:ba:6a:af:c4:1b:fd:84:78:
15:aa:a3:43:38:22:70:b7:f2:f1:09:4b:43:10:17:
83:b2:8f:e5:6b:ed:46:05:73:1c:b8:6c:66:1d:4e:
ec:f4:89:3f:63:85:b9:e6:fa:eb:ed:62:c6:a6:12:
bf:3e:c1:82:8e:6f:d3:fa:5b:7b:40:11:5f:5f:34:
71:66:65:fa:a0:74:92:16:74:65:1a:d2:64:84:f3:
be:44:b3:75:1d:3b:fd:70:4c:af:c3:f2:a8:9e:a8:
25:06:27:80:50:76:75:ff:4e:cf:be:68:99:bd:5a:
6e:ce:01:f3:b0:38:2e:c5:d5:e2:32:6a:b7:aa:dd:
73:9a:18:64:29:9e:f4:a2:47:74:0e:17:08:73:c4:
d2:e5:2c:55:f0:79:89:00:16:52:ec:1b:0f:a4:17:
af:d3:49:72:5e:4c:95:a4:1e:0b:d4:da:4c:74:29:
a7:17:f6:7e:ce:9a:f8:1d:f6:a6:e9:cb:e8:a7:52:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:FC:37:CB:60:6C:23:05:10:89:4B:27:C7:A5:75:A0:5D:B7:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7a039c7b-9805-360c-bf59-e0f031a3f72a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:1f:8a:f2:e1:8f:4e:ca:89:66:f3:aa:2d:17:a0:21:6d:26:
c8:f7:5d:d0:cf:29:f9:a3:c7:1b:92:4f:3f:af:b3:b5:52:79:
c7:52:39:b3:0a:0b:0a:2e:8d:ed:87:23:31:1d:45:00:1d:30:
b9:56:79:e1:43:6c:0a:bb:7b:e9:63:a5:77:45:ae:af:17:fa:
ea:8f:04:f8:88:68:76:1c:a1:94:ab:94:e1:ca:df:f0:99:d0:
48:a5:57:26:4c:70:94:3e:91:89:54:a3:e9:28:c8:4b:48:c5:
92:d1:e6:f7:aa:cd:fc:f2:1f:c4:b9:bd:1f:bf:82:da:44:ef:
b4:a8:d5:8c:d5:21:f7:50:c2:1c:2e:6d:97:0d:a7:66:63:ee:
8d:ef:75:1b:9d:1b:18:38:6b:d0:4c:03:3c:0b:bf:57:d8:81:
dd:a9:bf:61:c8:29:af:d7:72:0f:07:b4:b6:5c:ed:fe:c5:d9:
5f:dd:99:42:48:03:07:04:ba:a8:2b:07:cd:3c:96:b3:ad:65:
f9:dc:b2:2d:dc:8f:8c:cf:e0:6b:d7:9a:3b:aa:cd:27:78:9e:
e4:78:12:f4:ca:fb:b0:ae:04:e8:ab:0a:4e:7d:27:98:c0:16:
f3:0e:0d:96:ff:f7:a5:9b:0a:54:95:ab:2e:c8:05:25:32:d9:
c6:de:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org